Amazon (SAP-C01) Exam Questions And Answers page 69
True or false: In CloudFormation, you cannot create an Amazon RDS DB instance from a snapshot.
False, you can specify it in condition
False, you can specify it in resource properties
True
Designing highly available, cost-efficient, fault-tolerant, scalable systems
Designing for security and compliance
True or False: "In the context of Amazon ElastiCache, from the application's point of view, connecting to the cluster configuration endpoint is no different than connecting directly to an individual cache node."
False, you can connect to a cluster configuration endpoint, but not to a cache node.
True, from the application's point of view, connecting to the cluster configuration endpoint is no different than connecting directly to an individual cache node since, each has a unique node identifier.
True, from the application's point of view, connecting to the cluster configuration endpoint is no different than connecting directly to an individual cache node.
False, you can connect to a cache node, but not to a cluster configuration endpoint.
Designing highly available, cost-efficient, fault-tolerant, scalable systems
True or False: The Amazon ElastiCache clusters are not available for use in VPC at this time.
TRUE
True, but they are available only in the GovCloud.
True, but they are available only on request
FALSE
Designing highly available, cost-efficient, fault-tolerant, scalable systems
What bandwidths do AWS Direct Connect currently support?
10Mbps and 100Mbps
10Gbps and 100Gbps
100Mbps and 1Gbps
1Gbps and 10 Gbps
Designing highly available, cost-efficient, fault-tolerant, scalable systems
What combination of steps could a Solutions Architect take to protect a web workload running on Amazon EC2 from DDoS and application layer attacks? (Choose two.)
Put the EC2 instances behind a Network Load Balancer and configure AWS WAF on it.
Migrate the DNS to Amazon Route 53 and use AWS Shield.
Put the EC2 instances in an Auto Scaling group and configure AWS WAF on it.
Create and use an Amazon CloudFront distribution and configure AWS WAF on it.
Create and use an internet gateway in the VPC and use AWS Shield.
Implementing cost control strategies
Designing for security and compliance
What is the meaning of elasticity in AWS?
Single Choice
What does elasticity mean to AWS?
The ability to scale computing resources up easily, with minimal friction and down with latency.
The ability to scale computing resources up and down easily, with minimal friction.
The ability to provision cloud computing resources in expectation of future demand.
The ability to recover from business continuity events with minimal friction.
Designing highly available, cost-efficient, fault-tolerant, scalable systems
What feature of the load balancing service attempts to force subsequent connections to a service to be redirected to the same node as long as it is online?
Node balance
Session retention
Session multiplexing
Session persistence
Designing highly available, cost-efficient, fault-tolerant, scalable systems
What happens when Dedicated instances are launched into a VPC?
If you launch an instance into a VPC that has an instance tenancy of dedicated, you must manually create a Dedicated instance.
If you launch an instance into a VPC that has an instance tenancy of dedicated, your instance is created as a Dedicated instance, only based on the tenancy of the instance.
If you launch an instance into a VPC that has an instance tenancy of dedicated, your instance is automatically a Dedicated instance, regardless of the tenancy of the instance.
None of these are true.
Designing highly available, cost-efficient, fault-tolerant, scalable systems
Designing enterprise-wide scalable operations on AWS
What is a circular dependency in AWS CloudFormation?
Single Choice
What is a circular dependency in AWS CloudFormation?
When Nested Stacks depend on each other.
When Resources form a Depend On loop.
When a Template references an earlier version of itself.
When a Template references a region, which references the original Template.
Designing highly available, cost-efficient, fault-tolerant, scalable systems
Why would you need to edit claims in a SAML token?
Single Choice
What is a possible reason you would need to edit claims issued in a SAML token?
The NameIdentifier claim cannot be the same as the username stored in AD.
Authentication fails consistently.
The NameIdentifier claim cannot be the same as the claim URI.
The NameIdentifier claim must be the same as the username stored in AD.
Designing for security and compliance
Comments